Difference between revisions of "Disabling TLS"
From Observer GigaFlow Support | VIAVI Solutions Inc.
Kevin Wilkie (Talk | contribs) (Created page with "Disabling the unwanted algorithms (as opposed to us having to add something new) This can be done by editing the java.security file in the JAVA_HOME/lib/security folder Find t...") |
Kevin Wilkie (Talk | contribs) |
||
| Line 1: | Line 1: | ||
Disabling the unwanted algorithms (as opposed to us having to add something new) | Disabling the unwanted algorithms (as opposed to us having to add something new) | ||
This can be done by editing the java.security file in the JAVA_HOME/lib/security folder | This can be done by editing the java.security file in the JAVA_HOME/lib/security folder | ||
| − | Find the jdk.tls.disabledAlgorithms line and append | + | Find the jdk.tls.disabledAlgorithms line and append |
| − | jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 1024, EC keySize < 224, DES40_CBC, RC4_40, SSLv2Hello, SSLv3, TLSv1, TLSv1.1 | + | |
| + | SSLv2Hello, SSLv3, TLSv1, TLSv1.1 | ||
| + | |||
| + | so it looks similar to the below | ||
| + | |||
| + | jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 1024, EC keySize < 224, DES40_CBC, RC4_40, SSLv2Hello, SSLv3, TLSv1, TLSv1.1 | ||
This will then require a restart of Gigaflow | This will then require a restart of Gigaflow | ||
Latest revision as of 08:03, 16 August 2019
Disabling the unwanted algorithms (as opposed to us having to add something new) This can be done by editing the java.security file in the JAVA_HOME/lib/security folder Find the jdk.tls.disabledAlgorithms line and append
SSLv2Hello, SSLv3, TLSv1, TLSv1.1
so it looks similar to the below
jdk.tls.disabledAlgorithms=SSLv3, RC4, MD5withRSA, DH keySize < 1024, EC keySize < 224, DES40_CBC, RC4_40, SSLv2Hello, SSLv3, TLSv1, TLSv1.1
This will then require a restart of Gigaflow
